RFC 6749

"The OAuth 2.0 Authorization Framework", October 2012

Canonical URL:

http://www.rfc-editor.org/rfc/rfc6749.txt
This document is also available in this non-normative format: PDF.

Status:

PROPOSED STANDARD

Obsoletes:

RFC 5849

Author:

D. Hardt, Ed.

Stream:

IETF

Source:

oauth (sec)

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

The OAuth 2.0 authorization framework enables a third-party application to obtain limited access to an HTTP service, either on behalf of a resource owner by orchestrating an approval interaction between the resource owner and the HTTP service, or by allowing the third-party application to obtain access on its own behalf. This specification replaces and obsoletes the OAuth 1.0 protocol described in RFC 5849. [STANDARDS-TRACK]

For the definition of Stream, see RFC 4844.